Administrator's Guide

must be signed by the same CA, so that the TLS connection will be established. See your switch’s
manual for information about configuring TLS on your switch.
5.6.2 Openflow Controller keystore and truststore locations and passwords
The Openflow Controller’s configurations for keystore/truststore are located in the
com.hp.sdn.ctl.of.impl.ControllerManager configuration. The keystore and keystore.password
properties capture the location of the keystore and the password of the keystore respectively.
Similarly, the truststore and truststore.password capture the location of the truststore and the
password of the truststore respectively.
Figure 42 Components that reference OpenFlow keystore and truststore
A controller restart is required if these configurations are changed.
5.7 REST authentication
The SDN Controller relies on token-based authentication to authenticate its REST APIs. In other
words, all REST APIs except the /auth and /rsdoc APIs require an authentication token embedded
in an "X-Auth-Token" header to be included with each REST request. The /auth API allows you to
obtain a token, while the /rsdoc API provides live REST API documentation information about the
controller’s REST API. The next section describes how to obtain a token from the /auth API.
66 SDN Controller authentication